
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9D752204479111ECA77ED34DC4F9AE02.roa
File: 9D752204479111ECA77ED34DC4F9AE02.roa (raw, json)
Hash identifier: 2ung5ks0wrUO/hDRvjIHZLVeK77dP8EGbpcgDXcJSM8=
Subject key identifier: 52:6A:A3:56:F8:3E:F6:DB:97:5C:6F:26:2D:34:F9:C7:44:A4:77:6A
Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial: 05B6
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9D752204479111ECA77ED34DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:59:20 +0000
ROA not before: Sat 04 Oct 2025 23:55:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.196.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462 (0x5b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Validity
Not Before: Oct 4 23:55:02 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a45448-26d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:ed:af:23:a4:a1:ae:c8:a0:de:62:64:ba:
03:a7:46:a6:75:5a:52:47:cd:38:1e:e0:c3:13:ef:
e3:30:47:46:07:29:b5:50:af:38:e0:88:26:54:11:
69:5e:92:9c:2f:94:02:39:2f:43:03:15:80:a7:96:
68:ee:ea:f7:2d:0d:01:6d:8c:76:be:a1:dd:3f:c6:
16:08:f8:55:4e:11:86:75:9b:93:3b:fd:5b:d9:a0:
a5:8d:15:28:3e:b9:cd:e4:29:cf:e1:dd:a5:75:3e:
97:6a:a9:9a:76:16:d7:cc:a8:93:1a:5f:c4:e2:47:
e9:ba:aa:d8:fc:8a:b2:17:5f:4d:94:74:9b:ed:52:
ca:ca:1b:fa:82:f6:a6:9b:b1:04:f7:54:0d:1e:21:
a1:d9:e0:bc:59:cb:aa:90:52:78:6d:ec:a2:a8:de:
1e:6d:8c:87:10:2f:02:4e:f8:89:9f:eb:ce:0d:21:
ff:75:f5:c5:8b:68:d9:97:d1:76:06:d0:ad:8b:40:
af:2f:4d:d7:28:be:de:5b:d8:84:99:72:a9:1c:79:
e8:22:6b:c2:14:6a:8c:a9:9e:09:95:12:bc:f9:0c:
32:0a:57:74:ca:8f:62:01:46:5a:36:fe:7e:46:16:
ba:33:02:2e:d7:19:66:b4:23:b4:44:04:ce:1a:13:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:A3:56:F8:3E:F6:DB:97:5C:6F:26:2D:34:F9:C7:44:A4:77:6A
X509v3 Authority Key Identifier:
keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9D752204479111ECA77ED34DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.196.32.0/24
Signature Algorithm: sha256WithRSAEncryption
11:00:c1:b8:0c:c9:c7:e6:f9:72:d9:6c:78:de:d9:4a:9f:5f:
84:78:09:4a:b7:6e:2a:ac:52:d0:0f:76:52:d8:ac:da:2c:9e:
04:c0:81:62:f8:87:1b:75:4a:7a:21:c7:d1:d1:5a:ef:1e:74:
00:41:7c:80:fa:15:d9:a7:3c:6d:32:f0:0e:1d:68:4d:09:00:
6d:9f:9d:77:df:38:e4:4f:e1:70:80:7b:bc:31:51:18:1e:4a:
7e:cb:c3:10:ff:1a:d7:2d:fd:b8:f9:f3:28:50:e8:06:fe:75:
34:b1:70:79:71:36:cb:3a:eb:4f:33:b5:27:54:d9:39:b2:17:
fb:08:d8:f3:0d:f0:b2:9a:2f:e5:99:ff:e0:d1:1f:f1:39:40:
2d:29:37:96:6f:b2:ff:02:15:6e:9a:54:93:65:a3:7d:71:f1:
81:fe:6b:63:16:c1:39:56:59:de:ab:e0:64:76:65:a1:e8:50:
1f:39:9e:63:fd:0b:57:3a:18:dc:dc:e7:61:a7:40:51:63:5c:
db:1f:0e:19:ed:ec:1f:31:b7:04:e6:6d:34:ea:f2:78:e5:c6:
b4:f8:2d:b7:ac:08:9b:58:58:1d:f1:29:be:1a:e1:cb:ac:52:
65:38:73:e7:6e:03:39:0c:99:27:18:62:e6:b6:5b:cf:3f:0d:
74:23:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:30 2026 by rpki-client